Riskcovery

CVE-2025-0936

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly

State
Published
Severity
6.5 Medium
Published
May 7, 2025
Updated
May 8, 2025
Reserved
Jan 31, 2025

Read the record on cve.org

Description

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc).

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NArista

Weaknesses

Affected Products

ProductVersions
EOSArista Networks
  • 4.33.0 through 4.33.1Affected
  • 4.32.0 through 4.32.3MAffected
  • 4.31.0 through 4.31.5MAffected
  • 4.30.1F through 4.30.9MAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.